email-header-analyzer

Analizzatore di Intestazioni Email MHA Cos'è l'Analizzatore di Intestazioni Email MHA: L'Analizzatore di Intestazioni Email è uno strumento scritto in flask per analizzare le intestazioni email e convertirle in un formato leggibile dall'uomo; può anche: Identificare i ritardi dei salti...

CVE-2024-3495-Poc

CVE-2024-3495-Poc CVE-2024-3495 Country State City Dropdown CF7 Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10...

WordPress iQ Block Country <=1.2.11 - Cross-Site Scripting

WordPress iQ Block Country plugin 1.2.11 and prior contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and...

IP2Location Country Blocker < 2.38.9 - Unauthenticated Information Disclosure

IP2Location Country Blocker plugin for WordPress up to version 2.38.8 contains a regular information exposure caused by missing capability checks on admininit, letting unauthenticated attackers view plugin settings, exploit requires no special conditions. id: CVE-2025-1361 info: name: IP2Location...

CVE-2023-1389

Descrizione CVE-2023–1389 è una vulnerabilità di Iniezione di Comandi non autenticata nel router WiFi TP-Link Archer AX21. Un callback nel parametro country utilizza la funzione popen , eseguita come root, consentendo all'attaccante di iniettare valori arbitrari tramite richieste GET o POST...

CVE-2024-53027-WIP

CVE-2024-53027-WIP POC के लिए कार्य प्रगति पर CVE-2024-53027: Qualcomm Bluetooth/Wi-Fi भेद्यता 📄 अवलोकन CVE-2024-53027 एक मध्यम-गंभीरता वाली भेद्यता CVSS अवर्गीकृत है जो Android उपकरणों में Qualcomm के WLAN और Bluetooth चिपसेट को प्रभावित करती है। यह वायरलेस पैकेटों में गलत देश सूचना तत्वों IEs क...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

CVE-2026-38468

This is a SQL injection vulnerability in GazellePW (GazellePosterWall) , a private music tracker application, specifically in the country-code lookup endpoint (tools.php?action=get_cc). The ip parameter is not properly sanitized, allowing remote authenticated users holding the users_view_ips priv...

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

The operators of the DevMan ransomware-as-a-service RaaS scheme are maintaining a dedicated web platform that offers affiliates the ability to build payloads, oversee earnings, and manage various aspects related to victims. Swiss cybersecurity company PRODAFT is tracking the centrally administere...

EUVD-2026-47252

Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-61031

Vulnerability in the Oracle Financials Common Country product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-12592

CVE-2026-12592 affects the SlimStat Analytics WordPress plugin prior to v5.5.0. The vulnerability stems from not escaping a visitor-controlled geolocation value before rendering in admin analytics reports, enabling unauthenticated visitors to inject a stored XSS payload that executes in an admini...

CVE-2026-53227

creationtimestamp| type| source ---|---|--- 2026-07-01 02:48:57+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-03 16:07:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqwk6bpuc2f 2026-07-06 06:51:16+00:00| seen|...

WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool

Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script VBScript files that lead to the installation of legitimate Remote Monitoring and Management RMM software. Per findings from Kaspersky, the active campaign is targeting users of WhatsApp Desktop and WhatsA...

PT-2026-49413

Unauthenticated Arbitrary File Deletion in Contact Form Extender for Divi Save Entries, File Upload & Country Code Field = 1.0.6 versions...

CVE-2026-12186

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replacecountry in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Service Configuration Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploi...

CVE-2026-12186 GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection

A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. Affected is the function replacecountry in the library /usr/lib/oui-httpd/rpc/tor of the component Tor Proxy Service Configuration Handler. This manipulation causes command injection. The attack can be initiated remotely. The exploi...